[ Search ] [ What's New? ] [ About ]
[ Bugs ] [ Misc ] [ Mailing Lists ] [ Newgroups ] [ NewsWire ] [ Papers ] [ People ]
[ Pictures ] [ Publications ] [ Responce Teams ] [ Tools ] [ Upcoming Events ] [ Web Sites ]

rpc.ugidd(8)
Systems Affected: Systems running rpc.ugidd(8).
Problem: The ugidd interface specifies a call that maps a given uid or gid to a user or group name. This lets others collect all user names on your host by simply looping through the uid space.

Note that although nfsd version 2.0 and later does not support the ugid protocol anymore, the server is still shipped with current distributions.

Solution:Immediate fix: kill off rpc.ugidd and make sure it isn't started from rc.inet2.

Aleph One / aleph1@underground.org
Copyright © 1996 Computer Underground Society. All rights reserved.